1. Commitment to Data Protection

Digital Hut Events is fully committed to compliance with the General Data Protection Regulation (GDPR) for all users, attendees, and organizers accessing the system from the European Economic Area (EEA), as well as aligning with modern data sovereignty laws globally.

2. Core Privacy Roles

• The Organizer as Data Controller: The event organizer acts as the primary data controller for attendee lists and specific attendee marketing datasets gathered during booking.

• Digital Hut Events as Data Processor: We act as the data processor, hosting and organizing data within our systems, operating under strict infrastructure parameters.

3. Your Rights Under GDPR

The Right to Access and Portability

Users have the right to request a comprehensive export of all personal data held within our database structures in a structured, machine-readable format.

The Right to Rectification

You can update your account information, profile details, and business settings instantly through your customized account dashboard at any time.

The Right to Erasure ("Right to be Forgotten")

Users can request that their account records be erased. Our database framework processes these requests via soft-delete workflows to settle active ticket distributions and payout balances, followed by programmatic permanent purging where legal retention requirements allow.

4. Security Mechanisms

To ensure continuous compliance, we employ:

• Standard role-based access controls ensuring data is restricted only to authorized personnel (e.g., scanner staff can view attendee names for verification but cannot view full billing records).

• Fully encrypted database communication and secure SSL/TLS protocols for all user interactions.